Network Gateway

Hi Marco,

The type of deployment i.e either 1-arm or 2-arm, would primarily depend on the network topology in your deployment. Either of those modes can be configured based on several conditions like topology and corresponding changes needed to be done to accommodate ZTNA , security and so on. For a resource/application to be accessible via the ZTNA gateway, you will have to ensure that the application is resolvable internally from the gateway. As long as the application is reachable from the gateway, end users with ZTNA agents installed can also access the resources. 

https://docs.sophos.com/central/ZTNA/startup/en-us/setup/NetworkConfiguration/index.html

Hi Marco,

The type of deployment i.e either 1-arm or 2-arm, would primarily depend on the network topology in your deployment. Either of those modes can be configured based on several conditions like topology and corresponding changes needed to be done to accommodate ZTNA , security and so on. For a resource/application to be accessible via the ZTNA gateway, you will have to ensure that the application is resolvable internally from the gateway. As long as the application is reachable from the gateway, end users with ZTNA agents installed can also access the resources. 

https://docs.sophos.com/central/ZTNA/startup/en-us/setup/NetworkConfiguration/index.html